Creating credentials for connecting Microsoft Advertising / Microsoft Advertising data sources requires users to successfully log in to their Microsoft accounts in Funnel and consent to permissions required by Funnel's Azure Active Directory (Azure AD) app.

To be able to view the correct consent dialogue for these permissions in Funnel, the Microsoft account being used to create credentials for connecting data sources must fulfil the following conditions:

Additionally, if the Microsoft account is a work account managed by Azure AD (often the case if the Microsoft account is issued by an IT department), one of the following conditions must also be fulfilled:

If your Microsoft account is a work account managed by Azure AD, Funnel recommends contacting your organization's IT department or equivalent while referencing this help article as a first step in troubleshooting connect issues.

The second set of conditions specified above are required because a service principal for Funnel's Azure AD app must exist on the Azure AD tenant that manages the Microsoft account being used to create credentials for connecting data sources in Funnel. A service principal is created on a tenant when a user of a Microsoft account belonging to the tenant and with appropriate Azure AD role privileges consents to the permissions required by Funnel. Consent is granted either via a consent dialogue displayed while creating Microsoft Advertising credentials in Funnel or via approving a consent request in Azure AD that has been submitted by another user who has accessed an "Approval required" dialogue while creating Microsoft Advertising credentials in Funnel.

An "Approval required" dialogue displayed while creating Microsoft Advertising credentials in Funnel indicates that the Microsoft account being used in Funnel lacks appropriate Azure AD role privileges to grant consent to Funnel, but can request consent to be granted by a Microsoft account on the tenant that does have these privileges. Display of the "Approval required" dialogue in Funnel is optional and is dictated by an organization's Azure AD configuration settings.

Often, it is an IT administrator or equivalent at your organization that has the appropriate Azure AD role privileges for consenting to Funnel's Azure AD app. If consent has been requested via the "Approval required" dialogue described above, this user can approve the consent request in Azure AD. Otherwise, they must use their Microsoft account that also fulfils the first three conditions detailed above to create Microsoft Advertising credentials in Funnel. Credentials have been successfully created (and a service principal established) when step 2 of the Funnel connect dialogue (Choose accounts) is displayed after consenting to Funnel's permissions, connecting data sources is not required to establish the service principal.

Afterwards, other Microsoft accounts belonging to the same tenant and fulfilling the first three conditions detailed above will be able to create credentials and connect sources in Funnel for as long as the service principal persists on the tenant. The credentials for the Microsoft account that created the service principal may be removed both from Funnel and as a user from the Microsoft Advertising account being used as a data source without other credentials losing access.